Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
City of Sun Valley
bd_4789ab207d66825a · schema v1 · pii pii-v1
Full breach record for City of Sun Valley →City of Sun Valley (Idaho) notified the Idaho AG on April 17, 2024, of a phishing incident affecting one Fire Department employee's email account. Unauthorized access occurred March 14-20, 2024. Data exposed included names, SSNs, and driver's licenses for 35 Idaho residents, plus one payment card number. The City engaged forensic investigators, reset credentials, retrained staff, and offered 12 months of Experian credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed35 affectedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2024/04/04-17-2024-City-of-Sun-Valley.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2024
- Raw hash
- af775203906b2d5f4963dcb50aaed952976538ceee7a3c64cf376bba827a5b21
Reporting entity
- Name
- City of Sun Valleynorm: city of sun valley
- Domain
- sunvalleyidaho.gov
Victim entity
- Name
- City of Sun Valleynorm: city of sun valley
- Domain
- sunvalleyidaho.gov
Incident
- Discovered
- Mar 20, 2024
- Materiality determined
- —
- Notification sent
- Apr 17, 2024
- Affected individuals
- 35
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Provided notice of this incident and regular updates to the Idaho Chief Information Security OfficerProvided notice of this incident to the Idaho Attorney General’s office
- Initial access
- phishing_link
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.